configuring Apache and mod_ssl 1

[parkers]

Hi,

I'm trying to provide secure access to our web-site...

The platform is RedHat Linux 7.2 with apache web server (which works perfectly well for port 80 requests)

I can browse the web pages using https:// protocol, so I assume mod_ssl is installed although maybe not configured correctly ... when I check the certificate on Internet Explorer it states:
"The certificate has expired or is not valid yet"

Ideally I only want to force a secure login to the pages ... (the login script I can handle!)

I guess my questions are as follows:

* Is SSL handled exclusively by the Apache / Web Server (i.e. my web scripts do not need to do anything different other than point to the secure port when posting data??)

* Is there a process to validate the certificate?

I realise this is all a bit vague however any help provided would be greatly appreciated.

 

[danielhozac]

1. Yes.
2. You need to purchase a certificate from someone like Thawte (

http://www.thawte.com/).

//Daniel

 

[sleipnir214]

As an addendum to danielhozac's post, Thawte maintains a page on their site for the steps necessary to submit to them a certificate signing request for an Apache SSL cert. The instructions are specific to ApacheSSL, but work with Apache+mod_ssl, too.

Here's the URL:

http://www.thawte.com/html/SUPPORT/server/softwaredocs/apachessl.html

Want the best answers? Ask the best questions:

http://www.catb.org/~esr/faqs/smart-questions.html

TANSTAAFL!!

 

[parkers]

Thanks for the info ... I'll look into this.

 

[SirCharles]

Verisign also supplies certificates. You may set up a self-signed certificate, but until you get a real third party involved with the process, (verisign, thawte, etc.) users will continue to get prompted with secure login windows.

 

[sleipnir214]

smithcw:
Technically, if you get a certificate signed by Thawte, you've also had a certificate signed by Verisign. Verisign owns Thawte now.

The real difference between the two is that Thawte is about US $100 cheaper per year for a certificate signing.

Want the best answers? Ask the best questions:

http://www.catb.org/~esr/faqs/smart-questions.html

TANSTAAFL!!

 

[SirCharles]

Thanks for the info. I'll relay that to our buyers. Yea!!

 

[siberian]

http://www.instantssl.com

is a fast and cheap cert as well. We use them all over the place with great results.